EU and UK users have rights under GDPR and UK GDPR to access, correct, delete, restrict processing of, and port their personal data, as well as the right to object to processing and to withdraw consent at any time.
This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision operationalizes statutory privacy rights within Headspace's service terms, establishing procedural obligations for Headspace to comply with GDPR and UK GDPR requirements and defining the timeline and scope of Headspace's response obligations.
Removal of GDPR-specific provision indicates shift to jurisdiction-agnostic privacy rights language in consolidated provision, potentially reducing explicitness of European regulatory obligations.
View full change record →If you are in the EU or UK, you can request that Headspace provide a copy of all your personal data, delete your account and data, or stop using your data for marketing at any time — and Headspace must respond within one month.
How other platforms handle this
to object to profiling activities based on our own legitimate interests
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"Individuals in the EU and UK have privacy rights under the GDPR and the UK equivalent. We will work to respond to your verified request within a month's time unless we request an extension. Right to object to processing - You may have the right to request that Headspace restrict the use of your personal data in certain circumstances. Right not to be subject to automated decision making - You have the right not to be subject to a decision based solely on automated processing.Excerpt from Headspace's Privacy Policy
(1) REGULATORY FRAMEWORK: GDPR (Regulation (EU) 2016/679) Arts.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The provision operationalizes statutory privacy rights within Headspace's service terms, establishing procedural obligations for Headspace to comply with GDPR and UK GDPR requirements and defining the timeline and scope of Headspace's response obligations.
If you are in the EU or UK, you can request that Headspace provide a copy of all your personal data, delete your account and data, or stop using your data for marketing at any time — and Headspace must respond within one month.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.